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Amefidments in the riaims: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

TkHngnf riaims: 

1 . (cunently amended): A method for conducting a transaction over a ne t work, the 
ii Hwr ii l - im. lulling hetween a first System and a second system, the method comprising the steps 
of: 

(a) initiating a transaction session; 

(b) comparing a value of the first system with a value of the second system, wherein 
the value of the first system is associated with a particular transaction session; and 

(c) continuing the transaction based on the comparison by 

r.l ) generating an encryption key hy the y^econH system if the value of the first 
sy<;tem Hoes not mateh the value of the second system . 

2. (original): The method of claim 1 wherein the first system comprises a client system 
and the second system comprises a server system. 

3. (original): The method of claim 2 wherein the value of the client system is in a 
persistent client-side data file. 

4. (original): The method of claim 3 wherein the persistent client-side data file comprises 
a cookie. 

5. (original): The method of claim 4 wherein step b) further comprises: 
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bl) allowing the server system to compare the value in the cookie with the 
value in the server system. 

6. (currently amended): The method of claim 5-l.wherein if the value in the c o okie do e s 
nut match the value hi tlie sci - vei sys te m, continuing stepxjjurther comprises: 



c¥) generating an enciyption k e y; 

c2) storing a portion of the encryption key in the cookiefirst system; and 
c3) storing the entire encryption key on the serverseconiLsystem. 

7. (currently amended): The method of claim 6 wherein step c) further comprises: 

c4) allowing the serverseconisystem to transfer encrypted information to the 
dreTTtr-firsLsystem; and 

c5) allowing the serversecand_system to transfer a remaining portion of the 
encryption key to the circrrtrfksLsystem whereby the encryption key is capable of being 
utilized by the ciienl-firsLsystem to decrypt the encrypted information. 

8. (currently amended): The method of claim 7 wherein step c5) is performed in response 
to a payment transaction from the cfentfirst system to the scrvcrsac£md_system. 

9. (currently amended): The method of claim 5-£.wherein if the value in the cookie does 
luatcli the value hi the sei vei system, step c) further comprises: 

cicA) allowing the serversmmd-system to transfer encrypted information to the 
f-fWri-flrgt gy<;tp m if thp vpi\ue. in the. fir<;t syf;tem matches the value in the second system : 

and 
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c2g5) allowing the scrvcrsecomLsystem to transfer a remaining portion of the 
encryption key to the drentfirsLsystem whereby the encryption key is capable of being 
Utilized by the dTe^^^iJ:sLsystem to decrypt the encrypted information. 

10. (currently amended): The method of claim 9 wherein step t2c5) is performed in 
response to a payment transaction from the cticntfixsLsystem to the serversficond-system. 

1 1 . (currently amended): A system for conducting a transaction over a ne t work, the 
ii h ( ia;ii i 1; i ii rl ii Hing hfitwpen a first system and a second system, the system comprising: 

means for initiating a transaction; 

means for comparing a value of the first system with a value of the second system, 
wherein the value of the first system is associated with a particular transaction session; and 

means for continuing the transaction based on the comparison, wherein the continuing 

mpan?^ inrlnrlp:<; means; for generpiting an enr.ryption key hy the second system if the value of the 
first system Hoes not mateh the value o f the second system. 

12. (original): The system of claim 1 1 wherein the first system comprises a client system 
and the second system comprises a server system. 

13. (original): The system of claim 12 wherein the value of the client system is in a 
persistent client-side data file. 

14. (original): The system of claim 13 wherein the persistent client-side data file 
comprises a cookie. 
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15. (original): The system of claim 14 wherein the means for comparing further 
comprises: 

means for allowing the server system to compare the value in the cookie with the value in 
the server system. 

16. (currently amended): The system of claim i5-U-wherein if the value in th e cookie 
dues not match the value in the sf i vei system, the means for continuing the transaction further 
comprises: 

means for generating an encryption key; 

means for storing a portion of the encryption key in the cookiefirsr system; and 

means for storing the entire encryption key on the serverseconisystem. 

1 

17. (currently amended): The system of claim 16 wherein the rneans for continuing the 
transaction further comprises: 

means for allowing the serversecmKLsystem to transfer encrypted information to the 
ctrerrt-firsLsystem; and 

means for allowing the serversecoiKLsystem to transfer a remaining portion of the 
encryption key to the cferrtrfirsLsystem whereby the encryption key is capable of being utilized 
by the cfentfixsLsystem to decrypt the encrypted information. 

18. (currently amended): The system of claim 17 wherein the means for allowing the 
servers£CQnd_system to transfer a remaining portion of the encryption key is performed in 
response to a payment transaction from the cfent first system to the serversecond system. 
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19. (currently amended): The system of claim +5-i6_wherein if the value in the cookie 
does match the value in tlie s e i - vei system, the means for continuing the transaction further 
comprises: 

means for allowing the serverseconisystem to transfer encrypted information to 
the '-fW^first <^ygtp m if the vnhie in the first system matches the value in the secon d 
system ; and 

means for allov^ing the serversmin±system to transfer a remaining portion of the 
encryption key to the cfentfiisLsystem whereby the encryption key is capable of being 
utilized by the dientfksLsystem to decrypt the encrypted information. 

20. (currently amended): The system of claim 19 wherein the means for allowing the 
seryersecond-system to transfer a remaining portion of the encryption key is performed in 
response to a payment transaction from the cfam-first system to the scrversecond-system. 

21 . (currently amended): A computer readable medium containing program instructions 
for conducting a transaction uvei a network, the netwuik hicluding hetween a first system and a 
second system, the program instructions comprising the steps of: 

(a) initiating a transaction; 

(b) comparing a value of the first system with a value of the second system, wherein 
the value of the first system is associated with a particular transaction session; and 

(c) continuing the transaction based on the comparison h^: 

(cl) gpner?^tin[T enr.ryptinn key hy the semnd system if th e value of the first 
system Hoes nnt mateh the valne of the seennd system. 



-6- 



Attorney Docket: SVL920000071US1/I855P 

22. (original): The computer readable medium of claim 21 wherein the first system 
comprises a client system and the second system comprises a server system. 

23. (original): The computer readable medium of claim 22 wherein the value of the client 
system is in a persistent client-side data file. 

24. (original): The computer readable medium of claim 23 wherein the persistent client- 
side data file comprises a cookie, 

25. (original): The computer readable medium of claim 24 wherein step b) further 
comprises: 

bl) allowing the server system to compare the value in the cookie with the 
value in the server system. 

26. (currently amended): The computer readable medium of claim 25-2Lwherein ifthe 
value in tlitr cookie does not match the value in the server system, step c) further comprises: 

c¥) generating an enciyption key; 

c2) storing a portion of the encryption key in the cookiefirst system ; and 
c3) storing the entire encryption key on the serversecnnd system. 

27. (currently amended): The computer readable medium of claim 26 wherein step c) 
further comprises: 

c4) allowing the servcrsemnd-system to transfer encrypted information to the 
cherrt-firsLsystem; and 
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c5) allowing the scrversecondLsystem to transfer a remaining portion of the 
encryption key to the ciient-firsLsystem whereby the encryption key is capable of being 
utilized by the cHent-first system to decrypt the encrypted information. 

28. (currently amended): The computer readable medium of claim 27 wherein step c5) is 
performed in response to a payment transaction from the ctierrtr-firsLsystem to the serversecond 
system. 

29. (currently amended): The computer readable medium of claim 25-26_wherein if t he 
value in the cookie does match the value in the sci vei system, step c) further comprises: 

cfc4) allowing the serrersecond system to transfer encrypted information to the 
client <;y<;tfi m if the v^^lne in the fir^t s;y*;tem matches the value in the second system^ ; and 

c2c5) allowing the serversecondLsystem to transfer a remaining portion of the 
encryption key to the cfent-firsLsystem whereby the encryption key is capable of being utilized 
by the drcnt-fiisLsystem to decrypt the encrypted information. 

30. (currently amended): The computer readable medium of claim 29 wherein stepx2c5) 
is performed in response to a payment transaction from the ctierrt-first system to the server 
second_system. 



